GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,814
Erlang
36
GitHub Actions
32
Go
2,399
Maven
5,000+
npm
4,040
NuGet
722
pip
3,829
Pub
12
RubyGems
932
Rust
1,002
Swift
38
Unreviewed advisories
All unreviewed
5,000+
7,025 advisories
Filter by severity
A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an...
Moderate
Unreviewed
CVE-2023-39339
was published
Jul 12, 2025
A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It...
Moderate
Unreviewed
CVE-2025-7452
was published
Jul 11, 2025
A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical....
Moderate
Unreviewed
CVE-2025-7450
was published
Jul 11, 2025
A vulnerability exists in Advantech iView in
NetworkServlet.processImportRequest() that could...
Moderate
Unreviewed
CVE-2025-46704
was published
Jul 11, 2025
Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive
High
CVE-2025-53632
was published
for
github.com/ctfer-io/chall-manager
(Go)
Jul 10, 2025
A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2...
High
Unreviewed
CVE-2025-44177
was published
Jul 9, 2025
The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to...
Critical
Unreviewed
CVE-2025-4828
was published
Jul 9, 2025
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application...
High
Unreviewed
CVE-2025-40738
was published
Jul 8, 2025
A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application...
High
Unreviewed
CVE-2025-40737
was published
Jul 8, 2025
SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an...
Moderate
Unreviewed
CVE-2025-42970
was published
Jul 8, 2025
Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure...
Moderate
Unreviewed
CVE-2025-6795
was published
Jul 7, 2025
Marvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write...
High
Unreviewed
CVE-2025-6801
was published
Jul 7, 2025
Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability....
High
Unreviewed
CVE-2025-6798
was published
Jul 7, 2025
Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability. This...
High
Unreviewed
CVE-2025-6806
was published
Jul 7, 2025
Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion...
High
Unreviewed
CVE-2025-6805
was published
Jul 7, 2025
Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure...
Moderate
Unreviewed
CVE-2025-6807
was published
Jul 7, 2025
Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability...
High
Unreviewed
CVE-2025-6796
was published
Jul 7, 2025
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure...
High
Unreviewed
CVE-2025-6799
was published
Jul 7, 2025
Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure...
High
Unreviewed
CVE-2025-6804
was published
Jul 7, 2025
Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and...
Critical
Unreviewed
CVE-2025-6793
was published
Jul 7, 2025
Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure...
High
Unreviewed
CVE-2025-6803
was published
Jul 7, 2025
Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure...
High
Unreviewed
CVE-2025-6800
was published
Jul 7, 2025
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure...
High
Unreviewed
CVE-2025-6797
was published
Jul 7, 2025
Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This...
Critical
Unreviewed
CVE-2025-6794
was published
Jul 7, 2025
Dagster vulnerable to Path Traversal attack through its /logs endpoint
Moderate
CVE-2023-51232
was published
for
dagster
(pip)
Jul 7, 2025
ProTip!
Advisories are also available from the
GraphQL API